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We consider an TV — > M quantum cloning transformation acting on pure two-level states lying 
on the equator of the Bloch sphere. An upper bound for its fidelity is presented, by establishing 
a connection between optimal phase covariant cloning and phase estimation. We give the explicit 
form of a cloning transformation that achieves the bound for the case N=l, M=2, and find a link 
between this case and optimal eavesdropping in the quantum cryptographic scheme BB84. 



I. INTRODUCTION 

Perfect quantum cloning of a set of input states that contains at least two non-orthogonal states is impossible [1] . 
However, it is interesting to study how well we can approximate a perfect cloning procedure. We can expect different 
results depending on the set of input states considered. In particular, we expect that the smaller the set of inputs, 
i.e. the more information about the input is given, the better one can clone each of its states. 

We analyze the case of pure qubits, i.e. vectors of a two-dimensional Hilbert space Ti. ~ C 2 . Optimal N — > M 
cloning transformations (i.e. transformations which act on N identical inputs and create M outputs) for the largest 
set of input qubits, namely for qubits belonging to the whole Hilbert space, have been recently proposed [2-4]. Since 
a crucial requirement for such transformations is that their efficiency is the same for all input states, they were called 
universal cloning transformations. 

In this paper we will analyse cloning transformations that are optimal for a restricted set of input states, namely 
pure states of the form 

l^) = -L[|o) + e ^|i\] , (i) 

where </> <E [0, 2tt) and {| 0), 1 1)} represent a basis for a qubit. We call the qubits of this form "equatorial" because 
the z-component of their Bloch vector is zero, i.e. the Bloch vector is restricted to the intersection of the xy plane 
with the Bloch sphere. The parameter <f> is the angle between the Bloch vector and the x-axis. 

Studying the restriction of the input set to the equator is motivated by physical implementations of quantum 
communication ideas (all existing quantum cryptographic experiments are using states that are on the equator, rather 
than states that span the whole Bloch sphere) as well as by fundamental questions in quantum information processing. 
As we will show in this paper, restricting to equatorial states makes the cloning problem related to phase estimation. 
This connection can be exploited in order to derive bounds for the optimal cloning fidelity. As expected, restriction 
of the cloning symmetry improves the cloning performance. 

The paper is organised as follows. In Sect. II we describe the general operation of a phase covariant cloning 
transformation. In Sect. Ill we establish the connection between phase covariant cloning and phase estimation, and 
prove an upper bound on the fidelity of an N — > M phase covariant doner acting on equatorial qubits. In Sect. IV 
we derive the explicit form of the 1 — > 2 cloning transformation for equatorial qubits that saturates the bound, and 
point out a connection to eavesdropping in quantum cryptography. 

II. PHASE COVARIANT CLONING TRANSFORMATIONS 

In this section we consider cloning transformations with the requirement that the fidelity is the same for any 
equatorial qubit, i.e. it does not depend on the value of the phase <f>. We call such doners "phase covariant doners" 
(pec). 

We describe the action of an N — > M phase covariant doner on the N input qubits by means of a completely 
positive (CP) map Tmm [5]. We will consider only pure input states of the form | Vv>)(Vv> \® N , namely product states 
made of N identical copies. The output of the map is generally a mixed state pu of the M output qubits. In order to 
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guarantee that all the output copies are described by the same density operator we require that pu is supported on 
the symmetric subspace of the total Hilbert space of the M output qubits (the symmetric subspace is defined as the 
space spanned by all pure states which are invariant under any permutation of the constituent qubits). The density 
operator describing the state of each output qubit is given by 

p out = R[T NM (\^){^ N )], (2) 

where R denotes the partial trace over all but one output qubits. The phase covariance condition corresponds to 
imposing the following requirement on the operation of the cloning map 

U xP out Ul = R[T NM (U® N \ V>)(V 1®"^®")] (3) 

for any pure state | \p) and all unitary phase shift operators U x — exp [— \(a z — l)x] , where \ € [0, 27r) and a z is the 
Pauli operator diag{l, —1}. 

We define the quality of the cloning transformation in terms of the fidelity between the reduced density operator 
of each output copy and the input state | tp^) 

F = (^\p out \^) . (4) 

In the appendix we show that without loss of generality any phase covariant cloning transformation can be completely 
described in terms of two shrinking factors rj xy (N,M) and r] z (N,M). The former describes the shrinking of the 
component of the Bloch vector lying in the xy plane of the Bloch sphere, the latter the shrinking of the component 
along the z direction, namely the state of each output copy is 

P° ut = ^[l + Vx V {N,M){s x a x + s v a y ) + r] z {N,M)s z a z } , (5) 

where Si are the components of the Bloch vector of the initial state | tl>) of each of the N input copies. Therefore, for 
equatorial qubits, the doner leads to an isotropic shrinking, namely the density operator of each output copy (2) is 
given by 

p"" = Vxy (N,M)\^){^ \ + V X y(N,M)]l , (6) 

where 1 is the identity operator. Thus, for equatorial qubits the action of a phase covariant doner is completely 
specified in terms of the equatorial shrinking factor rj xy (N, M) and the fidelity is F pcc (N, M) = (1 + i] xy (N, M))/2. 

III. OPTIMAL CLONING OF EQUATORIAL QUBITS 

In this section we derive an upper bound for the shrinking factor r] xy (N, M) of a phase covariant doner for equatorial 
qubits. Our derivation is similar to the one of universal doners [3]. It is based on the concatenation property of phase 
covariant doners and on the link to phase estimation, as shown in the following. 

A. Concatenation of phase covariant doners 

We concatenate two phase covariant doners as follows. The first is an N — > M doner acting on TV equatorial 
qubits, the second one acts on the output state pu of the M output qubits of the first doner and gives L output 
copies. We show in the following that the sequence of these two cloning transformations is a phase covariant doner 
with a shrinking factor r\ xy for the xy plane that is the multiplication of the shrinking factors r\ xy of the two separate 
doners, namely 

r) xy (N,L)= Vxy {N,M)-r) xy {M,L) . (7) 

In order to prove the above property we exploit the decomposition of a density operator supported on the symmetric 
subspace [4], 

pm = $>iv>iXV'ii® M , (8) 
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with ft el (not necessarily positive) and ft = 1 . 

Using the shrinking character of the phase covariant cloning transformation described in the previous section and 
the linearity of the cloning map we can write the following conditions for the output of the N — > M doner acting on 
N pure qubits in the generic pure state | ip) with (unit-length) Bloch vector s: 

r] xv {N,M)s x , 
r] xy {N,M)s v , 

Vz(N,M)s Z7 (9) 

where s X i denotes the rr-component of the Bloch vector of state | ipi)(ipi |, and accordingly for y, z. 

The reduced density operator describing each of the L copies at the output of the second doner is given by 

R[Tml( P m)} = £ 0iR[T ML (\ V-iXVi O] = E & + W M > L){ Sxi<?X + SyiGy) + T] Z {M, L)S Z i<J Z ] > ■ (10) 

i i ^ ^ 

By using eqs. (9) the above expression takes the form 

R[Tml{Tnm{\^)(^\® N ))] = ^[1 + Vxy(N, M) ■ T] xy (M, L)(s x a x + s y a y ) + T] Z (N, M) ■ r) z (M, L)s z a z ] (11) 

namely the concatenation property holds. For input qubits from the equator the Bloch vector of each copy at the 
output of the two doners is simply shrunk in the xy plane by the factor r] xy (N, M) ■ rj xy (M 7 L). 



2_ ] fti s xi — 
i 

i 

E ft Szi = 



B. Phase covariant cloning and phase estimation 



We will now prove the following connection between phase covariant doners and phase estimation of equatorial 
qubits: 

V %(N,oo)=ri°*{N). (12) 

The quantity ^"^(N, M) is the shrinking factor in the xy plane of the optimal N — > M phase covariant doner, while 
rfg*{N) is the shrinking factor of the reconstructed reduced density operator after performing phase estimation (pe) 
on N equatorial qubits. 

The aim of phase estimation is to find the optimal strategy to estimate the value of the phase (f>. This is described 
in terms of a positive-operator valued measure (POVM), namely d/z((/>*), where <j>* is the estimated value of the 
phase, cfyi(0*) > and J -^-d/j,((j)*) = 1. The outcome of each instance of measurement provides, with probability 
p((f>\(f>*) = Tr the "candidate" |Vv>*) for |V>)- The fidelity of phase estimation can be calculated 

from the outcomes of the measurement as 

= (Vv>l^|Vv>> . (I 3 ) 

where — J 4|^p(</>|</>*)|')/v>,)(V'0* I i s the reconstructed density operator. For covariant phase estimation the fidelity 
does not depend on thus for the optimal procedure can also be written as 

-Q^%e{N)mm + \ [i-vw] i , (14) 

namely the input state is shrunk by the factor fj pe (N) — 2F pe (N) — 1. 

The fidelity for optimal covariant phase estimation of equatorial qubits, derived in [6], takes the form 
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In order to prove Eq. (12) we first notice that after performing optimal phase estimation on N equatorial qubits all in 
state | ipj,} we can prepare a state of L qubits, supported on the symmetric subspace, where each qubit is described by 
the reduced density operator (14). This procedure can be viewed as a phase covariant doner and therefore it cannot 
perform better than the optimal TV — > L phase covariant cloning transformation. Thus we can write the inequality 

f$?{N)< V %{N,L), (16) 

which holds for any value of L, and in particular for L — > oo. 

We will now prove the opposite inequality (which holds for L — > oo only): we concatenate a phase-covariant 
N — > L doner, acting on equatorial qubits, with a subsequent optimal state estimation (se) procedure (note that state 
estimation on qubits includes also an estimate of their phase) . The whole procedure can be seen as a phase estimation 
performed on the input | \® N , with fidelity 

F pe (N) = (^\A L (p L )\^) , K l ( P l) = ^Tr[P^ L ] I^XVvl , 

fj- 

where pz, is the output of the doner and Al(pl) is the CP-map of the state estimation of L qubits, {P^} represents 
the set of optimal POVM's for state estimation of L qubits [7,6] and | Vv) denotes the candidate for | ip) when 
performing the measurement P M . Since pl is supported on the symmetric subspace we use again the decomposition 
PL = J2i Pi\i>i)(i>i l® L and obtain 



F pe (N) = j2mpM\ \r L m 



^(L)\^)(^\ + l -(l-rf s f{L))l 



m (17) 



where the optimal shrinking factor for state estimation is given by 77°f'(L) = (2F se (L) — 1) = [7]- Taking the 
limit of (17) for L — > oo we have 

F pe (N) Eii^m^)^ l^> = I hxy(N,oo) + 1] . 

The concatenation of a phase covariant doner with a state estimation cannot perform better than the optimal phase 
estimation, thus we can write 

r7°P 4 (iV,oo)<^f(AO. (18) 
The inequalities (16) and (18) prove the equality (12). 



C. Bound for optimal phase covariant cloning 

We now prove an upper bound for the fidelity of an TV — > M phase covariant cloning transformation acting on 
equatorial qubits. We consider a phase-covariant doner IVoo that results from concatenating the two phase-covariant 
doners XWm and Tm oo- In this way we cannot obtain an N — > oo doner that works better than the optimal one. 
Thus, by using the concatenation property of phase covariant doners proven above we can write 

y xy (N,M) ■ ^(M,oo) < v7y(N,^) . (19) 

In the sequence of the two doners we take the M — > oo as the optimal one in order to find the tightest upper bound 
for the equatorial shrinking factor of a phase covariant N — > M cloning transformation. We rewrite equation (19) as 
follows: 



n°PHN, oo) 

< WM,s ik^' (20) 



By exploiting the connection to phase estimation in equation (12), proven above, this bound takes the form 
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n opt (N) 

r ] lf{N,M)<f lpcc {N,M) = ^± 



2 (M-N) ^ l =° V fflG+l) , 21) 

EM-1 //M\ ( M \ 



In Figure 1 we show the upper bound for the fidelity of phase covariant cloning and the optimal fidelity for a universal 
cloner. The two quantities are shown as a function of M for fixed N = 1. By varying N it is possible to see that 

V PCC (N,M)> V Z V (N,M) VJV<M , (22) 

as expected. Note that while in the case of universal cloning the explicit form of the CP map which achieves the 
bound is known [2], in the case of phase covariant doners acting on equatorial qubits we do not know whether the 
bound (21) can be achieved for general values of N and M . In the next section we present the cloning transformation 
which achieves the bound in the particular case N=l, M=2. 



1 

0.95 - 

0.9 

0.85 - 

0.8 - 

0.75 - 

0.7 - 

0.65 - 

0.6 



phase covariant cloning x 
universal cloning ❖ 



x 
o 



X 

o 



X 



X 



o 



X 



X 



1 



M 



FIG. 1. Upper bound for the fidelity in phase covariant cloning compared with the optimal fidelity for universal cloning of 
qubits. Both sets of points are shown for a fixed number of inputs, N = 1, as function of M, the number of outputs. For the 
limit M — > oo one finds from the formulae given in the text that F pcc (l, oo) = 3/4 and F°^ iv (l, oo) = 2/3. 
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IV. OPTIMAL 1 -»• 2 CLONING OF EQUATORIAL QUBITS 

In this section we present a constructive proof for the best 1 — > 2 cloning transformation acting on equatorial qubits. 
For convenience we choose the equator in the xz plane instead of the xy equator. (Note that optimality of the fidelity 
must be independent from the choice of a particular basis.) Hence we consider equatorial states with real coefficients 
of the form 

| V) = a\ 0) + /3\ 1) with a, [3 real, a 2 + 1 = 1 . (23) 

Our notation and method is inspired by [8]. We proceed as follows: first we derive the optimal doner that takes only 
the four BB84 states as input. Here we use the acronym BB84 for the quantum cryptographic protocol described in 
[9]. Remember that the four BB84 states are given by: 

1 /I A\ I I 1 \ \ I T\ / 1 



|0>, |1>, |0> = ^(|0> + |1», |T) = v /i(l°>-| 1 »- ( 24 ) 

Then we will show that this transformation leads to the same fidelity for any input from the equator. Therefore we 
have also found the best transformation that takes all states from the equator as input. (If we could find a better one 
on the whole equator it would have to be better than the optimal one for the BB84 states.) 

We start from a general symmetric ansatz for the unitary transformation on the input qubit, blank qubit and 
ancilla, written in this order: 

C/|0)|0)|X)=a|00)|A)+6(|01) + |10))|B)+c|ll)|C) , 

^|l)|0)|A-)=fi|ll)|A)+6(|10) + |01))|B)+c|00)|C) . (25) 

For convenience we include all phases in equation (25) into the ancilla states, so that the coefficients a, 6, c, a, b and c 
are real and positive. Furthermore the transformation should not change under renaming the basis, i.e. exchange of 
| 0) and | 1) - therefore we have a = a, b = b and c = c. 

The normalization and unitarity conditions for equation (25) read 

a 2 + 2b 2 + c 2 = 1 , 

ac(C\A) + 2b 2 (B\B) + ac(A\C) = . (26) 

Now we have to determine the free parameters in this transformation (coefficients and scalar products of ancillas) 
such that the fidelity F — {ip \p out \ ip), where | ip) is one of the four BB84 states, is constant and optimal. Here p out 
is the reduced density matrix of the first or second bit at the output of the doner. 

It is straightforward to calculate the fidelities corresponding to the reduced output density matrices for the four 
BB84 states. From their equality we find the following constraints: 

F = a 2 + b 2 , (27) 
F=±{l + abRe[{A\B) + {B\A)]+bcRe[{B\C) + {C\B)}) , (28) 
= abRe[{A\B) + {B\A)}+bcRe[{B\C) + {C\B)} . (29) 

As the scalar products of ancillas are independent parameters the real part of which varies between -1 and +1, we 
can maximise the fidelity in equation (28) to 

F= i(l + 26(a + c)) (30) 

by an appropriate choice of ancillas. Similarly, we can always fulfill equation (29) by the right choice of ancillas. So, 
our task reduces to finding the maximum of the function 

F=i(l + a 2 -c 2 ) , (31) 

with the constraint 



F=i + v /i(l- a 2_ c 2 )(a + c) . (32) 
This can be done analytically with the help of Lagrange multipliers. The solution for the optimum is 
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(33) 



This solution corresponds to an optimal fidelity of 

F opt (l,2) = ! + 0.854 , (34) 

which reaches the bound F pcc (l, 2) = ^(fj pcc (l, 2) + 1), given by equation (21). 

The optimal cloning transformation for the BB84 states can be written explicitly as follows (we see that a two- 
dimensional ancilla is sufficient): 

u | o)| o)| x) = (i + yj)| 00)1 o) + ^±(1 oi) + 1 io»|i> + (i-y±)|ii)|o) , 

U 1 1)1 0)1 X) = (I + 11)1 1) + ^(1 10) + I 01»| 0) + (± - y/i)\ 00)1 1). (35) 

We still have to show that this transformation leads to the same fidelity for any pure input state taken from the 
equator. In fact, any unitary transformation of the kind 

C/|0)|0)|X)=a|00)|0)+6(|01) + |10))|l)+c|ll)|0) , 

U 1 1)| 0)| X) = a\ 11)| 1) + b(\ 10) + | 01))| 0) + c| 00)| 1), (36) 

that leads to the same fidelity for the BB84 states has this property. This can be seen by calculating the fidelity when 
applying the transformation (36) to the state given in equation (23). We find 

F(a) = {a 4 + /3 4 )a 2 + b 2 + a 2 f3 2 • 2c 2 + Aa 2 p 2 b{a + c) , (37) 

which at first glance does not look like a constant, but can be shown easily to be independent of a by inserting 
equation (30) and the constraints from unitarity, given in eq. (26). Thus we have shown that apart from the four 
BB84 states our doner (35) is optimal for any state from the equator. 

It is worth pointing out that there is a link between optimal cloning of equatorial qubits and optimal eavesdropping 
in the BB84 scheme, see [10]: the intersection of the curve for the mutual information between Alice and Bob and 
the curve for the optimal mutual information between Alice and Eve occurs at a disturbance D = 1 — F which 
corresponds to our optimal equatorial cloning fidelity: if Eve performs a symmetric attack where she gets as much 
information as Bob she cannot find a better strategy than applying the best doner. We could have actually proved 
an upper bound for our doner from a contradiction: let us assume the doner could have a higher fidelity than the 
one indicated by the intersection of the information curves. Then Eve could use it to eavesdrop and would have found 
a better spying device than the optimal one. Therefore the best doner cannot have a higher fidelity than the best 
symmetric eavesdropping attack. In this section we have shown a constructive proof for the corresponding optimal 
cloning transformation. 

V. CONCLUSIONS 

In this article we have pointed out a connection between optimal cloning of equatorial qubits and phase estimation. 
We exploited this connection to establish an upper bound for the fidelity of a phase covariant N — > M cloning 
transformation acting on equatorial qubits. Our results for this restricted set of inputs are qualitatively similar to the 
ones for universal cloning, in the sense that in both cases the concatenation property holds. Quantitatively our upper 
bound is higher than the one for universal cloning, as expected. The bound for phase covariant cloning was shown to 
be reached for N = 1, M = 2 by constructing the optimal cloning transformation explicitly. In this particular case we 
also found a link between phase covariant cloning and optimal eavesdropping strategies in the quantum cryptographic 
scheme BB84. Finding the explicit optimal phase covariant cloning transformation for general N and M remains to 
be achieved. 

This work was supported in part by Deutsche Forschungsgemeinschaft under grant SFB 407, by Ministero 
dell'Universita e della Ricerca Scientifica e Tecnologica under the project "Amplificazione e rivelazione di radiazione 
quantistica" and by the ESF-QIT programme. 
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APPENDIX A: MAP OF THE PHASE COVARIANT CLONER 

We use the Kraus decomposition [5] of a CP-map (the map RTn.m in Eq. (2) is CP since it is the partial trace of 
the CP-map Tn,m) 

r(t n , m (\ O) = 5>*mw 14 . (ai) 

k 

where Ak are operators on H depending on N and M, satisfying the condition 

E4^ = l- (A2) 

k 

By introducing the following basis for the C-algebra of the operators on H 

(T = ^(<t x + i(jy) , G\ = \^o x - i(j y ) , (A3) 

0-2 = ^(1+^), <7 3 = ^(l-<7 2 ) , (A4) 

we can write in general 

3 

A k = 4a a , (A5) 



a=0 



with c% e C. It follows that 

r(t nm (\^)^D)^T, E ct4*^\^)(^\4 = 

k a, 0=0 

= r^s a/J (|^)^|), (A6) 

a, 0=0 

with S a/J (| I) = v a \ \4 and E fc cgcf . 

Imposing the phase-covariance condition (3) to the above CP-map and using (A6) we find 

Y / r af3 x a p(u x \^(i>\u;) = J2r af3 u x x a p(\^(4>\)u* . (A7) 

Writing down explicitly each term of Eq. (A7) and imposing that the equality holds Vx G [0, 2ir) we obtain the 
following constraints on the coefficients T al3 : 



p01 


_ p02 


_ p03 


= o , 


plO 


_ pl2 


_ pl3 


= , 


p20 


_ p21 


= o , 




p30 


_ p31 


= . 





(A8) 
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In order to obtain Eq.(A8) we have written a general density matrix in H as 

df) ,A9) 

with 5 G [0, 1] and 7 e C. The condition (A2) takes the form 

£ ^ a aU P = 1 , (Aio) 

a, 0=0 

which gives 

r n = i-r 22 , r oo = 1 _ r 33^ (A11) 

Note that T aa = J2k \ c k\ 2 > Va and T"' 3 = {T f:)a )*. Using (All) we have < T aa < 1 and \c%\ < 1 Va, from 
which we obtain 

|r 32 | 2 = l£4cri 2 < £ \44*\ 2 < r 22 r 33 < 1 . (A12) 
k k 

Using the conditions (A8) and (All) we can now write Eq. (A6) in matrix form as follows 

wt (\i\/i\9N^ f(i-r 33 )(i-s) + r 22 s 7 r 32 \ 

R(T NiM {\il>)wr ))=l 7 *(r 32 )* (i-r 22 )i + r 33 (i-(5) J ( > 

Let us now use the notation r\ xy = |T 32 |, ip = arg (r 32 ) and r\ z = (T 33 + T 22 - 1). Note that < rj xy < 1, — 1 <r] z <1, 
and r\ xy ,z = Vxy,z{N, M): the dependence on AT and M is included in the coefficients c£. 

Comparing the Bloch vector of an input generic qubit s 1 ™ = (2 j'y j cos<^>, — 2\y\ sin^>, 2<S — 1) where 
<f> = arg (7) with the Bloch vector of the one-particle reduced density matrix of the output s° ut = 
(2t7 pcc | 7 | cos(cj) + ip), — 2r7 pcc |-7| sm(<f> + ip), s l z n r] z + (T 22 - T 33 )), we notice that for 

ip = and T 22 = T 33 (A14) 

the map Tjv,m is completely determined by the factors rj xy (N, M) and r] z (N, M): r] xy (N, M) describes the shrinking of 
the Bloch vector in the xy plane, while r\ z gives the shrinking along the z-axis. For initial equatorial qubits (S = 1/2, 
7 = e^/2) wc find with the conditions (A14): 

\®N^_l( 1 Vxy (N,M)e 1 ^ 

2\r ]x y(N,M)e- i <t> 1 

Vxy (N, M)\ ^)(^ I + hi - Vxy (N, M)]l (A16) 



i.e. the action of of the phase-covariant doner Tjv,m on equatorial qubits is completely determined by the shrinking 
factor r] xy (N, M) in the xy plane. 

Let us now show that without loss of generality we can impose the conditions (A14) to describe the map of an 
optimal phase covariant doner for equatorial qubits. For ^^0 the fidelity for equatorial qubits is given by 

F pcc {N,M) = \{^\R{T NM {\^){^\® N ))\^)\ 2 = 

= l -{l + r 1xy {N,M)cos<p) (A17) 

By definition the optimal doner Tjv,m is the one which maximizes F pcc (N,M). From (A17) we see that maximizing 
F pcc {N,M) is equivalent to setting ip = and maximizing rj xy (N, M), which is independent of tp. 

Let us now analyse the condition T 22 = T 33 . Let us suppose that we can find an optimal phase-covariant doner 
Tn,m with r} x ^{N, M) and T 22 7^ T 33 . From the explicit form of 02 and 03, given in (A4), one can see that renaming 
the basis (i.e. exchanging | 0) <-> 1 1)) is equivalent to exchanging <T2 <-> 03 and 00 <-> <j\, while leaving the basis 
vectors unchanged. The exchange 2 <-> 3 leaves r] xy (N,M) and r] z (N,M) invariant. Now consider a doner Tjv,m 
such that its single particle reduced density operator is the matrix R(Tn,m(\ Vv)(Vv> \® N )) written in the form (A6) 
with the exchange 2^3. The map T/v.m must also be optimal: in fact optimality of T^m cannot depend on the 
particular choice of the basis, and the fidelity (A17) is invariant under the exchange 2^3. Now consider the doner 
described by the map T s = |(T/v,m + Tn.m)- This doner has the same shrinking factor ^"^(N, M) for equatorial 
qubits. Therefore we can always construct an optimal doner with T 22 = T 33 . 
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